Vulnerability Description
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Open Build Service | < 2.10.5 |
| Debian | Debian Linux | 9.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.suse.com/show_bug.cgi?id=1171649ExploitIssue TrackingPatch
- https://lists.debian.org/debian-lts-announce/2021/02/msg00006.htmlMailing ListThird Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1171649ExploitIssue TrackingPatch
- https://lists.debian.org/debian-lts-announce/2021/02/msg00006.htmlMailing ListThird Party Advisory
FAQ
What is CVE-2020-8021?
CVE-2020-8021 is a vulnerability with a CVSS score of 5.3 (MEDIUM). a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Servic...
How severe is CVE-2020-8021?
CVE-2020-8021 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8021?
Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Open Build Service, Debian Debian Linux.